Description
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to edit product content pages to inject malicious javascript.
Remediation
References
Related Vulnerabilities
WordPress Plugin Cms Pack TimThumb Arbitrary File Upload (1.3)
WordPress Plugin Centrora Security Multiple Vulnerabilities (6.5.6)
WordPress Plugin WP Airbnb Review Slider SQL Injection (3.2)
WordPress Same Origin Method Execution (SOME) Vulnerability (0.70 - 3.7.13)
WordPress Plugin ShareThis:Free Sharing Buttons and Tools Cross-Site Request Forgery (7.0.5)